SMS for WooCommerce
SMS for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
Every one of the 2 issues recorded for SMS for WooCommerce has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. SMS for WooCommerce is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2024-12220SMS for WooCommerce <= 2.8.1 - Cross-Site Request Forgery to Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
SMS for WooCommerce
Author
The African Boss
Free Designated number or your own number Use your own Twilio number or just setup without a number and one will be designated for your store (only PRO users get a free number). SMS Order updates to admins, customers and more With SMS for Woocommerce, you can send SMS notifications to your customers when an order is placed, cancelled, or refunded, etc. But that’s just the beginning. There are 4 kinds of SMS groups you can send: - Admin SMS - Order updates sent to admin(s) - Bulk SMS - personalized SMS/Email to multiple users at once - Customer SMS - Order updates sent to customers - Marketing SMS - Upsells, cross-sells, order again SMS, single order to subscriptions, etc Wait! There is more. SMS Order updates for the right orders to the right people You can specify what kinds of orders you want to send SMS notifications for. - Send SMS for specific Payment Methods - Send SMS for specific Order Status SMS templates, Shortcodes and Personalization Use shortcode templates like [first_name] to send personalized SMS messages to your customers. Bulk SMS/Emails to user roles, order statuses Our robust Bulk SMS/Emails allows you to send bulk SMS to all your users and customers. But wait! You get to specify whether you want to send to all but can also send to specific users and groups. - Need to send personalized SMS/Email to all administrators or authors, etc on your site? We got you. - Need to send personalized SMS/Email to all customers whose orders are still pending payment? We got you. - How about selecting some users out of the groups above? We got you. HPOS compatibility & WooCommerce Blocks support Demo An example of the plugin in use here See the screenshots Usage After activating the plugin, add your Twilio settings such as your Admin Phone Number, Twilio Account SID, Twilio Auth Token, Twilio Phone Number to start sending SMS notifications. You can also use a designated number for your store if you do not have a Twilio account. Unlock more great features for you and your customers and priority support with a PRO license. Upgrade
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C